Azure Sentinel EPS & Log Size Calculator v1.5
Review the below Explainer video and accordingly please fill in the number of Devices for each of the sections and this calculator will automatically calculate its EPS (Events Per Second) and Storage Requirements
Network Firewalls (Layer 7 - DMZ)
Network Firewalls (Internal)
Network Firewalls (DMZ)
Windows Servers - HIGH EPS (Event Log)
Windows Servers - MED EPS (Event Log)
Windows Servers - LOW EPS (Event Log)
Other Network Devices
Windows Clients (PCs / Tablets / POS)
Network Flows (NetFlow/S-Flow)
Network Wireless LAN
Other Security Devices
Network VPN / SSL VPN
Network Web Proxy
HyperVisor (ESXi, Hyper-V etc)
Azure Activity Logs (Direct Connect)
Azure AD Identity Protection (Direct Connect)
Office 365 (Direct Connect)
Azure Defender (Direct Connect)
Azure Defender for IoT (Direct Connect)
Microsoft 365 Defender (Direct Connect)
Microsoft Defender for Endpoint (Direct Connect)
Microsoft Defender for Identity (Direct Connect)
Microsoft Cloud App Security (Direct Connect)
Some of the data connectors, such as Microsoft 365 Defender and MCAS, include both free and paid data types. Read this Document to know more.
Please click here to download this data.
To download this data please use a PC. Note: We do not store or track any of this data on our server, this is all stored on your local browser cache.
To download this chart please use a PC.
By viewing and utilizing the Azure Sentinel Sizing Calculator, you acknowledge that you have read, understood and agreed to this Disclaimer.
Frequently Asked Questions
What is Azure Sentinel?
Azure Pricing Calculator
Azure Sentinel ROI Estimator
Any Questions? Connect with my LinkedIn Profile:
My Blog URL:
Last Updated: 23 July 2021